$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ecf6a0a-8c45-3d57-820a-94c470f656f7.roa File: 1ecf6a0a-8c45-3d57-820a-94c470f656f7.roa (raw, json) Hash identifier: tuTRQB+Pso9YMVElz6i/bFInrXyANn97eRev6PrvhXQ= Subject key identifier: 75:86:51:C1:17:3D:57:B0:20:D9:FB:E7:93:C3:25:A8:53:A2:8B:47 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A681432BE78B41B74FA0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ecf6a0a-8c45-3d57-820a-94c470f656f7.roa Signing time: Thu 23 Jan 2025 06:13:19 +0000 ROA not before: Thu 23 Jan 2025 06:13:19 +0000 ROA not after: Wed 23 Apr 2025 05:13:19 +0000 asID: 16591 IP address blocks: 136.38.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a6:81:43:2b:e7:8b:41:b7:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:19 2025 GMT Not After : Apr 23 05:13:19 2025 GMT Subject: CN=ccd7516f-be2f-467b-91cd-a559b09f2db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:66:6c:f3:15:cc:78:e7:f0:4d:6b:a1:88:97: 91:ee:ed:28:09:af:31:9d:31:76:d9:a0:ca:10:79: d0:b0:ff:b5:b1:4c:8b:7a:17:53:c0:4f:29:b1:70: be:a1:db:22:0b:bd:c6:6a:2b:f6:b4:f9:5f:19:e2: d4:a8:8f:d7:84:fc:29:a2:8c:42:47:53:c1:ad:8e: 6a:c5:a6:e0:f5:fc:ae:bd:30:1a:ba:ce:f2:de:5f: 56:16:00:fe:27:ea:ca:08:14:ea:ce:9d:1c:6f:20: ff:97:5d:ce:a5:14:bf:9b:82:45:4f:37:c0:58:a7: a3:cd:36:4e:60:c9:8b:12:47:2e:f5:e1:03:6c:a7: 2f:9a:8b:21:77:2d:68:d1:5c:ff:63:19:e4:0a:9c: e9:83:3e:77:83:92:fa:cd:ab:bd:fc:62:55:c3:2f: b2:d3:27:51:b3:ea:4c:53:dd:d9:ee:75:63:5f:3f: d9:c4:d5:28:ec:1a:ab:2e:bf:60:ec:91:2f:f0:87: 23:37:4d:1f:d4:00:1e:1c:6f:22:e7:ac:be:d3:14: 34:8e:86:a8:07:ba:f8:ea:a7:59:e9:1d:8f:76:26: c9:88:c8:1b:05:5e:79:6b:f1:99:6f:58:f7:60:e8: c7:a0:b7:8b:ac:54:6a:dd:d6:b8:7b:10:9a:21:32: 4e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:86:51:C1:17:3D:57:B0:20:D9:FB:E7:93:C3:25:A8:53:A2:8B:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ecf6a0a-8c45-3d57-820a-94c470f656f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:7f:c0:a3:39:6f:ed:84:46:e6:6f:c0:3b:4a:51:2b:ca:be: 71:c1:37:f9:b8:eb:a2:05:66:1b:34:f8:4d:9d:cd:7c:5f:e3: ab:00:81:25:f0:e7:b9:97:9a:f3:a3:4a:98:ee:af:4f:20:4c: 4a:2e:34:0e:e7:82:ea:ad:52:54:e2:ab:e4:42:fe:ec:4f:45: 33:dc:42:c6:13:f1:fc:91:0f:97:6c:54:18:a3:86:c8:56:8f: 5b:3f:4b:d4:97:2d:48:ef:a6:ec:9b:69:d9:80:14:8c:02:22: cf:b1:18:4a:8d:1f:6f:c2:e3:d1:d2:ec:e4:ed:ba:ef:ad:8d: 30:05:50:4f:a7:95:18:f9:13:f5:b5:67:00:f6:84:54:ad:cf: ed:ed:ee:a1:9c:31:06:02:ef:52:0a:64:3e:fc:37:18:71:24: db:b7:c8:2b:b9:7f:28:a9:ee:87:7d:13:88:61:b8:e1:03:40: 93:5c:31:ee:61:0e:34:48:0b:3c:58:f4:9f:d9:fb:a2:67:f2: e1:3c:c7:4a:aa:62:f1:56:d2:a7:1d:a8:80:d7:58:d3:8d:e2: 1c:63:f8:23:74:fe:0d:e1:cf:e6:28:b8:17:7b:f1:e0:35:6d: c7:48:52:c3:b8:c1:dd:d7:13:5e:48:ff:05:8c:5f:3e:be:23: 27:d3:a5:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKaBQyvni0G3T6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxOVoXDTI1MDQyMzA1MTMxOVowLzEtMCsGA1UEAxMk Y2NkNzUxNmYtYmUyZi00NjdiLTkxY2QtYTU1OWIwOWYyZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGZs8xXMeOfwTWuhiJeR7u0oCa8xnTF22aDK EHnQsP+1sUyLehdTwE8psXC+odsiC73Gaiv2tPlfGeLUqI/XhPwpooxCR1PBrY5q xabg9fyuvTAaus7y3l9WFgD+J+rKCBTqzp0cbyD/l13OpRS/m4JFTzfAWKejzTZO YMmLEkcu9eEDbKcvmoshdy1o0Vz/YxnkCpzpgz53g5L6zau9/GJVwy+y0ydRs+pM U93Z7nVjXz/ZxNUo7BqrLr9g7JEv8IcjN00f1AAeHG8i56y+0xQ0joaoB7r46qdZ 6R2PdibJiMgbBV55a/GZb1j3YOjHoLeLrFRq3da4exCaITJOIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWGUcEXPVewINn755PDJahTootHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWVjZjZhMGEtOGM0NS0z ZDU3LTgyMGEtOTRjNDcwZjY1NmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5/wKM5b+2ERuZvwDtKUSvKvnHBN/m466IFZhs0+E2dzXxf46sAgSXw 57mXmvOjSpjur08gTEouNA7nguqtUlTiq+RC/uxPRTPcQsYT8fyRD5dsVBijhshW j1s/S9SXLUjvpuybadmAFIwCIs+xGEqNH2/C49HS7OTtuu+tjTAFUE+nlRj5E/W1 ZwD2hFStz+3t7qGcMQYC71IKZD78NxhxJNu3yCu5fyip7od9E4hhuOEDQJNcMe5h DjRICzxY9J/Z+6Jn8uE8x0qqYvFW0qcdqIDXWNON4hxj+CN0/g3hz+YouBd78eA1 bcdIUsO4wd3XE15I/wWMXz6+IyfTpYM= -----END CERTIFICATE-----Generated at Wed Feb 19 22:33:50 2025 by rpki-client